CVE-2026-74505

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Fix UAF at error handling during probe Although 6fire driver had a few fixes for dealing with the early error handling during the probe phase, it forgot a pending URB before freeing the resources, which may lead to a UAF. This patch addresses it by doing the almost same cleanup procedure like the normal disconnect phase at the error path.

Package Linux Kernel
Published 2026-08-15
Last modified 2026-08-15
Patch available
Yes

Affected versions

Fixed in 6.6.151, 6.12.103, 6.18.44, 7.1.8, 7.2-rc6 and their respective stable series.

Fixed in
✓ 6.6.151 6.6.x ✓ 6.12.103 6.12.x ✓ 6.18.44 6.18.x ✓ 7.1.8 7.1.x ✓ 7.2-rc6

Frequently asked questions

  • What is CVE-2026-74505?

    CVE-2026-74505 is a unscored severity Linux kernel vulnerability . CVE-2026-74505 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

  • Is there a patch available for CVE-2026-74505?

    Yes. CVE-2026-74505 has been patched. Fixed versions include 6.6.151, 6.12.103, 6.18.44 and others.

  • Is CVE-2026-74505 actively exploited?

    No. CVE-2026-74505 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.